Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/tQVfOBPE52Seziir2Wyv8yOV88M.roa
File:                     tQVfOBPE52Seziir2Wyv8yOV88M.roa (raw, json)
Hash identifier:          /IlYE4yUrqJhVKaJt+HipQRkZpJE7YhZcCo6y00qFJo=
Subject key identifier:   B5:05:5F:38:13:C4:E7:64:9E:CE:28:AB:D9:6C:AF:F3:23:95:F3:C3
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       4D
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/tQVfOBPE52Seziir2Wyv8yOV88M.roa
Signing time:             Thu 22 Jun 2023 00:34:57 +0000
ROA not before:           Thu 22 Jun 2023 00:34:57 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.201.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:57 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=B5055F3813C4E7649ECE28ABD96CAFF32395F3C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:39:58:ce:ae:d7:20:cb:62:21:08:60:fe:a2:
                    ba:c2:f9:af:0f:31:50:49:85:84:a0:bd:69:c9:70:
                    15:87:e9:88:c6:f3:f1:3b:d8:02:ca:eb:32:77:3c:
                    a3:b5:92:6e:0a:75:cd:6f:f8:1e:17:97:af:b0:4e:
                    f1:be:d9:95:d8:3d:d2:96:f6:61:aa:52:72:0e:db:
                    24:77:a2:37:9e:41:bf:19:1b:18:4f:7e:7b:29:01:
                    7b:45:c7:ae:52:2e:27:04:04:53:42:18:1f:81:ee:
                    3f:c2:30:19:b8:44:d7:b4:a4:fa:56:0f:47:f2:c4:
                    1d:33:c1:16:25:eb:06:1e:43:ed:d1:0c:6e:75:11:
                    6c:a8:6c:cb:f2:9e:b3:30:ec:0f:ff:70:51:87:7c:
                    fb:5e:77:2a:3e:ea:48:e0:af:ee:e0:dc:ee:89:72:
                    c7:e2:f3:13:09:51:64:43:86:1b:5b:c3:16:2d:3a:
                    ca:8e:36:3a:10:76:85:52:df:7c:a4:68:ff:e4:fd:
                    2c:06:e6:a7:4e:86:39:cb:f3:cb:b5:fc:2d:3b:b7:
                    40:bc:b2:4d:50:1c:d3:37:4d:e8:d3:b7:e4:f8:75:
                    92:78:f9:f4:89:e8:73:31:86:ea:c9:49:bc:59:72:
                    bc:92:0a:63:56:66:24:62:59:5b:7b:28:22:fb:ac:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:05:5F:38:13:C4:E7:64:9E:CE:28:AB:D9:6C:AF:F3:23:95:F3:C3
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/tQVfOBPE52Seziir2Wyv8yOV88M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:c4:e1:f2:4b:75:0d:d7:2d:be:df:52:31:3f:6b:1b:64:65:
         e5:c1:43:b2:8b:e2:52:48:48:48:53:fc:80:c9:c4:6a:90:ae:
         b6:72:3e:0f:18:40:e7:cf:bb:21:dd:cc:cc:eb:c4:7f:60:a2:
         b7:d2:7d:37:07:f5:d9:77:86:31:f3:04:0c:2e:de:92:ec:f4:
         5c:25:16:60:dc:b2:49:29:62:a1:f6:5d:fd:47:04:55:7b:25:
         4e:45:ae:a1:6d:77:ca:4d:24:67:86:1b:b5:de:cc:cc:45:5e:
         ec:ce:a6:2a:bc:97:d7:1b:dd:31:f9:a7:8a:ba:ca:86:2f:08:
         51:63:eb:b7:8a:1c:ad:ca:00:f5:94:ad:0b:da:88:6c:d6:cf:
         1e:e9:73:ec:2b:57:10:35:e2:9e:5e:d3:b1:38:73:99:a1:9a:
         0d:b8:6a:14:9b:7c:b1:ca:55:07:78:db:c7:fc:26:c0:30:22:
         e0:af:2f:77:17:ba:8d:f2:d3:56:d7:7d:9f:92:2f:25:24:df:
         18:7e:6a:e8:4d:6d:83:f2:3a:52:cb:4d:69:ca:ac:21:d2:9e:
         0d:fc:e5:bd:c7:c4:7e:5d:da:af:08:4c:1e:b9:32:b3:98:6b:
         15:57:00:5b:30:30:a0:59:37:44:52:62:d6:90:4e:1e:af:15:
         7e:0c:6e:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:37 2025 by rpki-client